Skip to content
This repository has been archived by the owner on Feb 17, 2023. It is now read-only.

ct log_list references are out of date, update to v3 #11

Open
loosebazooka opened this issue Feb 16, 2023 · 1 comment
Open

ct log_list references are out of date, update to v3 #11

loosebazooka opened this issue Feb 16, 2023 · 1 comment

Comments

@loosebazooka
Copy link

loosebazooka commented Feb 16, 2023

I can't tell if this is being used anymore, but the urls in here are very out of date

https://github.com/rustls/ct-logs/blob/main/build.py#L33-L34

https://www.gstatic.com/ct/log_list/log_list.json has not been available for months

it is recommended you update to v3 log lists (v1 is turned down and v2 will be turned down soon): https://groups.google.com/a/chromium.org/g/ct-policy/c/zejEtWAJtEA

update the generator to generate code to use https://www.gstatic.com/ct/log_list/v3/log_list.json and https://www.gstatic.com/ct/log_list/v3/log_list.sig

NOTE: this is not a resource that is meant to be used directly by applications, and is mostly a part of the Chrome CT implementation, we provided a notification as best we could, but ultimately in a best effort manner (developers using this should have a close relationship with the CT ecosystem, as a minimum, following the ct-policy mailing list very carefully: https://groups.google.com/a/chromium.org/g/ct-policy)

@ctz
Copy link
Member

ctz commented Feb 17, 2023

Thanks for the note! I think the best course of action for this is to archive the repo for now, as ct-logs is not an important piece of the rustls ecosystem at the current time. But in the future if we integrate CT checking into webpki, that would change.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants